nerdexam
Amazon

CLF-C02 · Question #211

A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshot

The correct answer is B. The company. For managed database services like Amazon Aurora, the encryption of databases and backups, which pertains to customer data, is the customer's responsibility under the AWS shared responsibility model.

Submitted by haru.x· Mar 6, 2026Security and Compliance

Question

A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

Options

  • AAWS
  • BThe company
  • CAWS Marketplace partners
  • DThird-party partners

How the community answered

(38 responses)
  • A
    16% (6)
  • B
    71% (27)
  • C
    8% (3)
  • D
    5% (2)

Why each option

For managed database services like Amazon Aurora, the encryption of databases and backups, which pertains to customer data, is the customer's responsibility under the AWS shared responsibility model.

AAWS

AWS is responsible for the security of the underlying service (Aurora itself), but not for managing the encryption of customer-specific data within that service.

BThe companyCorrect

While AWS provides the encryption capabilities (like AWS Key Management Service integration), the customer (the company) is responsible for enabling, configuring, and managing the encryption keys and settings for their Aurora database clusters and snapshots. This falls under 'security in the cloud,' specifically regarding customer data.

CAWS Marketplace partners

AWS Marketplace partners are not directly involved in managing the encryption of a customer's Aurora database.

DThird-party partners

Third-party partners are not directly involved in managing the encryption of a customer's Aurora database.

Concept tested: Shared Responsibility Model (customer responsibilities for data encryption)

Source: https://aws.amazon.com/compliance/shared-responsibility-model/

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice